This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft File: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json) Hash identifier: s5c35PbzpJoZ+U2qviMNY4wgsQ9xFRz12HsUVNbsw0M= Subject key identifier: BB:8B:1F:1A:1D:C4:B1:65:FA:6C:19:D7:EC:D7:10:D9:31:3B:81:1F Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba Certificate serial: 019B3D235780646C9C79C27B9F1C36EA2D72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 19:01:24 +0000 Manifest this update: Sat 20 Dec 2025 19:01:24 +0000 Manifest next update: Sun 21 Dec 2025 19:01:24 +0000 Files and hashes: 1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: q4ZGbTfCqx5PUYADQkbhqn41sI8Nf+bqyoxHMQC1/vE=) 2: HCmwt2WAK-H7WYTy1icgaTefv78.roa (hash: +bS4/m9dhw+Ug0oj+WLZYyQxSyPJBlp+QZfTQscGHe8=) 3: Haz2dutrUVMMKz8DWDpTMKU7v-M.roa (hash: UYJn16zkfgLSDIIDhGPHhj8L2SfoMr/Jiya6AdzxVHU=) 4: lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa (hash: bq6a+K+pPXFxcaKzeiruinFGWe/rm0xE/5P0J11lvFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:57:80:64:6c:9c:79:c2:7b:9f:1c:36:ea:2d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba Validity Not Before: Dec 20 19:01:24 2025 GMT Not After : Dec 21 19:01:24 2025 GMT Subject: CN=bb8b1f1a1dc4b165fa6c19d7ecd710d9313b811f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:81:03:bf:a8:5e:94:32:d8:0e:4d:44:90:d8: 6b:2f:c1:41:35:a3:12:e7:56:e1:88:5c:66:6a:d0: ee:c7:50:91:e9:9e:ae:68:77:7a:9a:5c:a9:c3:12: f2:2b:5e:d3:07:c4:55:ec:fa:50:41:b0:fd:d1:3b: 35:58:38:d9:2b:ef:84:36:ee:fe:b3:b3:c7:fc:74: 18:49:a9:41:cf:e1:0d:ff:71:60:28:d9:1d:80:9f: f4:db:47:a1:26:a7:6c:87:4b:da:1e:55:8c:c2:7a: 7c:72:5a:9f:15:25:91:9f:4b:aa:95:cf:5d:a3:2a: 21:fb:5f:a5:23:50:5d:be:49:08:c4:a9:f7:30:21: 1d:d8:df:ba:ff:27:b3:04:b4:24:d7:da:71:cc:a2: d0:06:bd:0a:00:fa:17:47:1e:90:b5:35:87:c6:18: 39:e9:9b:a1:11:4c:95:91:cb:fb:6b:e4:a2:df:f4: 12:b7:22:12:33:89:81:10:05:da:24:df:11:41:55: b9:e0:63:ab:46:ee:55:ad:9e:6e:40:88:4a:26:6d: a5:eb:58:30:32:20:29:80:86:4c:f7:9b:9e:07:6d: 4f:1f:db:c3:49:cc:b8:bf:bc:75:ad:a3:54:18:b8: 64:11:af:86:a0:f8:b0:fc:6a:59:1d:0e:1d:2c:53: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:1F:1A:1D:C4:B1:65:FA:6C:19:D7:EC:D7:10:D9:31:3B:81:1F X509v3 Authority Key Identifier: keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:44:dd:82:42:25:eb:12:d5:3b:66:8e:bd:38:57:02:d2:5f: 74:6e:df:33:bd:c5:b3:d0:18:78:31:f9:54:44:c7:07:4a:29: 3b:8c:3c:be:52:1c:d8:15:e7:94:8e:ac:00:b7:39:7e:4a:aa: 1d:f0:bb:62:2c:d4:78:d2:47:59:9d:a9:d3:df:a0:a5:5d:4a: d2:78:88:d4:9b:20:7b:92:02:98:20:56:cb:8c:b7:06:81:f2: 36:b1:ea:06:3e:8d:b2:99:55:4f:ba:a6:0e:d2:3b:31:99:39: 2d:ae:93:c6:eb:fb:3b:09:01:68:df:fa:a1:86:e6:eb:16:3c: 1d:d9:7e:6e:a6:29:4c:a2:56:5a:6c:d9:cb:65:5e:10:02:50: 44:f1:17:36:14:21:a9:8d:f6:e5:89:3a:08:b4:e6:6d:62:41: eb:83:59:b7:cb:8b:2a:5b:df:73:bc:57:51:c3:d3:be:02:45: f5:a3:6b:49:bb:11:c6:59:1a:be:fd:02:7a:f0:8f:81:42:7b: fc:80:dc:bb:94:e8:84:c6:fa:fe:ff:e3:73:e9:c1:0e:4c:f1: 1b:b5:b2:c1:88:f8:3d:61:21:85:48:eb:e3:6b:8f:06:77:ce: b1:ab:42:3b:84:eb:1a:d5:0c:42:86:47:f9:d2:d7:53:f9:c6: b4:5a:85:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1eAZGycecJ7nxw26i1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjkyMGJiZDdmYjcwZWY1ZGJjZjJkMGZlYTIwMmJkOTU3 NjVlYmEwHhcNMjUxMjIwMTkwMTI0WhcNMjUxMjIxMTkwMTI0WjAzMTEwLwYDVQQD EyhiYjhiMWYxYTFkYzRiMTY1ZmE2YzE5ZDdlY2Q3MTBkOTMxM2I4MTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YEDv6helDLYDk1EkNhrL8FBNaMS 51bhiFxmatDux1CR6Z6uaHd6mlypwxLyK17TB8RV7PpQQbD90Ts1WDjZK++ENu7+ s7PH/HQYSalBz+EN/3FgKNkdgJ/020ehJqdsh0vaHlWMwnp8clqfFSWRn0uqlc9d oyoh+1+lI1BdvkkIxKn3MCEd2N+6/yezBLQk19pxzKLQBr0KAPoXRx6QtTWHxhg5 6ZuhEUyVkcv7a+Si3/QStyISM4mBEAXaJN8RQVW54GOrRu5VrZ5uQIhKJm2l61gw MiApgIZM95ueB21PH9vDScy4v7x1raNUGLhkEa+GoPiw/GpZHQ4dLFNILwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuLHxodxLFl+mwZ1+zXENkxO4EfMB8GA1UdIwQY MBaAFPJpILvX+3DvXbzy0P6iAr2Vdl66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYt MGJjZmM1MzI5MzNjLzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYtMGJjZmM1MzI5MzNj LzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0TdgkIl 6xLVO2aOvThXAtJfdG7fM73Fs9AYeDH5VETHB0opO4w8vlIc2BXnlI6sALc5fkqq HfC7YizUeNJHWZ2p09+gpV1K0niI1Jsge5ICmCBWy4y3BoHyNrHqBj6NsplVT7qm DtI7MZk5La6Txuv7OwkBaN/6oYbm6xY8Hdl+bqYpTKJWWmzZy2VeEAJQRPEXNhQh qY325Yk6CLTmbWJB64NZt8uLKlvfc7xXUcPTvgJF9aNrSbsRxlkavv0CevCPgUJ7 /IDcu5TohMb6/v/jc+nBDkzxG7WywYj4PWEhhUjr42uPBnfOsatCO4TrGtUMQoZH +dLXU/nGtFqFQQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:36:01 2025 by rpki-client